{"metadata": {"vulnerability": "cve-2022-44563", "count": 29, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 21}}, "data": [{"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-44563", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-05T00:00:00Z", "date_only": false, "value": "2022-11-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-44563", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / huawei", "record": "cve-2022-44563", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-09T21:15:00Z", "date_only": false, "value": "2022-11-09T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4R92-2GJG-4MQW", "record": "GHSA-4R92-2GJG-4MQW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-09T21:15:00Z", "date_only": false, "value": "2022-11-09T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-44563", "record": "GSD-2022-44563", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-09T21:15:18.977Z", "date_only": false, "value": "2022-11-09T21:15:18.977000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-11-09T21:15:18.977Z", "date_only": false, "value": "2022-11-09T21:15:18.977", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-44563", "record": "FKIE_CVE-2022-44563", "field": "published"}, {"timestamp": "2022-11-10T00:00:00Z", "date_only": false, "value": "2022-11-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-11-10T12:01:16Z", "date_only": false, "value": "2022-11-10T12:01:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4R92-2GJG-4MQW", "record": "GHSA-4R92-2GJG-4MQW", "field": "published"}, {"timestamp": "2022-11-10T13:56:00Z", "date_only": false, "value": "2022-11-10T13:56Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-44563", "record": "GSD-2022-44563", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-11-10T13:56:16.547Z", "date_only": false, "value": "2022-11-10T13:56:16.547000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-11-14T00:00:00Z", "date_only": false, "value": "2022-11-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-02-18T13:07:01Z", "date_only": false, "value": "2023-02-18T13:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7775", "record": "CVE-2022-44563", "field": "creation_timestamp", "uuid": "0df6d97b-056b-4bef-9844-1e99e97dbf39", "content": "#exploit\n1. Proxylogon & Proxyshell & Proxyoracle & Proxytoken & ALL Exchange Server Vulns Summarization\nhttps://github.com/FDlucifer/Proxy-Attackchain\n\n2. CVE-2022-44563:\nHuawei Recovery Update Zip ToC-ToU Vulnerability\nhttps://labs.taszk.io/articles/post/reunzip", "url": "https://t.me/CyberSecurityTechnologies/7775"}, {"timestamp": "2023-02-19T21:50:11Z", "date_only": false, "value": "2023-02-19T21:50:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/f_V5WAw89TJE3mX7iA0X18pm5lwQ8AySxeot_kMKmTKhRCw", "record": "CVE-2022-44563", "field": "creation_timestamp", "uuid": "e66d51cf-ea77-4ea7-84d9-693301168104"}, {"timestamp": "2023-02-21T13:05:46Z", "date_only": false, "value": "2023-02-21T13:05:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jxixKB1GGbK3q7ZKTf-z1SAMg-aPMfOcd1311YRna1Tccdk", "record": "CVE-2022-44563", "field": "creation_timestamp", "uuid": "741e027a-826e-4369-af74-c3bba8ac9eb2"}, {"timestamp": "2023-02-22T17:25:48Z", "date_only": false, "value": "2023-02-22T17:25:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2638", "record": "CVE-2022-44563", "field": "creation_timestamp", "uuid": "d069ca5a-a525-45fb-8aa0-3b0922766389", "content": "\ud83d\udd25\ud83d\udd25\ud83d\udd25REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB(CVE-2022-44563, Toc-ToU race condition vuln can be exploited to achieve arbitrary code execution )\nThis is a new vulnerability in a proprietary mode called \u201cSD-Update\u201d, which can once again be used to achieve arbitrary code execution in the recovery mode, enabling unauthentic firmware updates, firmware downgrades to a known vulnerable version or other system modifications. Taszk advisory for the vulnerability is published here. The story of exploiting this vulnerability was made interesting by the fact that, since the exploit abuses wrong assumptions about the behavior of an external SD card, we needed some hardware-fu to actually be able to trigger it. In this blog post, Lorant Szabo describe how we went about creating \u201cFaultyUSB\u201d - a custom Raspberry Pi based setup that emulates a maliciously behaving USB flash drive - and exploiting this vulnerability to achieve arbitrary code execution as root!", "url": "https://t.me/crackcodes/2638"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "sources_release_date.data.1.date"}, {"timestamp": "2023-11-02T08:02:00Z", "date_only": false, "value": "2023-11-02T08:02:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-12-13T01:19:25.321Z", "date_only": false, "value": "2023-12-13T01:19:25.321345Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-44563", "record": "GSD-2022-44563", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T13:36:40.531Z", "date_only": false, "value": "2023-12-18T13:36:40.531000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202211-0371", "record": "VAR-202211-0371", "field": "last_update_date"}, {"timestamp": "2024-08-03T13:54:03.894Z", "date_only": false, "value": "2024-08-03T13:54:03.894Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-44563", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-01T14:31:44.084Z", "date_only": false, "value": "2025-05-01T14:31:44.084159Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-44563", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-01T14:31:44.084Z", "date_only": false, "value": "2025-05-01T14:31:44.084159Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-44563", "record": "FKIE_CVE-2022-44563", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-01T14:32:09.385Z", "date_only": false, "value": "2025-05-01T14:32:09.385Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-44563", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-01T14:32:09.385Z", "date_only": false, "value": "2025-05-01T14:32:09.385Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-44563", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-01T15:31:30Z", "date_only": false, "value": "2025-05-01T15:31:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4R92-2GJG-4MQW", "record": "GHSA-4R92-2GJG-4MQW", "field": "modified"}, {"timestamp": "2026-06-17T05:08:31.503Z", "date_only": false, "value": "2026-06-17T05:08:31.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-44563", "record": "FKIE_CVE-2022-44563", "field": "lastModified"}]}